Privacy Policy

Privacy Policy

This Privacy Policy explains which personal data we collect when you use our website and store, why, how long we keep it, and what your rights are. The seller details (name, address, contact email) are shown on every order confirmation and invoice.

1. What we collect

1.1. Account: your username, email address and password (stored only as a secure hash), and the date you joined.

1.2. Orders: the products you bought, prices, discount codes, VAT, the payment method and your country, and the order date. Payments are handled by Stripe: we never see or store your card or bank details.

1.3. Security and proof of delivery: your IP address and browser information when you place an order and when you download a product, and the date and IP address when you agree that digital content is delivered immediately. For serial keys: the machines a key is activated on (a hashed machine ID and the IP address of the activation).

1.4. Reviews you write, and the emails we send you (order confirmations, account emails).

1.5 Discord ID if you choose to link and verify your account on our discord. Your discord ID is only used to sync your purchases and related roles.

2. Why we use it (legal basis)

• To create and manage your account and to deliver what you bought: performance of the contract.
• To keep financial records of orders: legal obligation (Dutch tax law requires us to keep them for 7 years).
• To prevent fraud and abuse, to secure the site (rate limits, captcha) and to handle disputes and chargebacks: legitimate interest.

We don’t sell your data and we don’t use it for advertising.

3. Cookies

We only use cookies that are needed for the site to work: a session cookie (to keep you logged in and remember your cart) and a security cookie against forged requests (CSRF). We don’t use tracking or advertising cookies, so we don’t ask for cookie consent.

The captcha on the login, register and redeem pages runs on our own server: it sets no cookies and contacts no third parties.

Videos on product pages are YouTube videos. Nothing is loaded from YouTube until you click play; the video then plays through youtube-nocookie.com, and YouTube’s privacy policy applies.

4. Who we share it with

• Stripe (payments, VAT calculation and invoices): https://stripe.com/privacy
• Our email provider, to send you emails.
• Some page scripts and styles might be loaded from public content delivery networks (cdnjs, jsDelivr), which see your IP address when your browser loads them.

5. How long we keep it

• Your account data: as long as your account exists.
• Orders: 7 years (legal obligation). When you delete your account, your orders are kept without your name, email address and IP addresses.
• Download history and reviews: as long as your account exists.

6. Your rights

• Access: download a copy of your data with Download my data on your profile.
• Correction: change your email address on your profile, or contact us.
• Deletion: delete your account with Delete account on your profile. Orders are kept anonymized as described above.
• Objection and restriction: contact us.
• You can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the authority in your country.

7. Changes

We may update this policy. The current version is always on this page.